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Abstract 

The secrecy capacity of relay channels with orthogonal components is studied in the presence of an 
additional passive eavesdropper node. The relay and destination receive signals from the source on two 
orthogonal channels such that the destination also receives transmissions from the relay on its channel. 
The eavesdropper can overhear either one or both of the orthogonal channels. Inner and outer bounds on 
the secrecy capacity are developed for both the discrete memory less and the Gaussian channel models. 
For the discrete memoryless case, the secrecy capacity is shown to be achieved by a partial decode-and- 
forward (PDF) scheme when the eavesdropper can overhear only one of the two orthogonal channels. 
Two new outer bounds are presented for the Gaussian model using recent capacity results for a Gaussian 
multi-antenna point-to-point channel with a multi-antenna eavesdropper. The outer bounds are shown 
to be tight for two sub-classes of channels. The first sub-class is one in which the source and relay are 
clustered and the and the eavesdropper receives signals only on the channel from the source and the 
relay to the destination, for which the PDF strategy is optimal. The second is a sub-class in which the 
source does not transmit to the relay, for which a noise-forwarding strategy is optimal. 
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I. Introduction 

In wireless networks for which nodes can benefit from cooperation and packet-forwarding, 
there is also a need to preserve the confidentiality of transmitted information from untrusted 
nodes. Information privacy in wireless networks has traditionally been the domain of the higher 
layers of the protocol stack via the use of cryptographically secure schemes. In his seminal paper 
on the three-node wiretap channel, Wyner showed that perfect secrecy of transmitted data from 
the source node can be achieved when the physical channel to the eavesdropper is noisier than the 
channel to the intended destination, i.e., when the channel is a degraded broadcast channel [1]. 
This work was later extended by Csiszar and Komer to all broadcast channels with confidential 
messages, in which the source node sends common information to both the destination and the 
wiretapper and confidential information only to the destination [2]. 

Recently, the problem of secure communications has also been studied for a variety of multi- 
terminal networks; see, for example, [3-10], and the references therein. In [11], the authors show 
that a relay node can facilitate the transmission of confidential messages from the source to the 
destination in the presence of a wiretapper, often referred to as an eavesdropper in the wireless 
setting. The authors develop the rate-equivocation region for this four node relay-eavesdropper 
channel and introduce a noise forwarding scheme in which the relay, even if it is unable to 
aid the source in its transmissions, transmits codewords independent of the source to confuse 
the eavesdropper. A special case where the eavesdropper receives a degraded version of the 
destination's signal is studied in [12]. In contrast, the relay channel with confidential messages 
in which the relay node acts as both a helper and eavesdropper is studied in [13]. Note that 
in all the three papers, the relay is assumed to be full-duplex, i.e., it can transmit and receive 
simultaneously over the entire bandwidth. 

In this paper, we study the secrecy capacity of a relay channel with orthogonal components 
in the presence of a passive eavesdropper node. The orthogonality comes from the fact that 
the relay and destination receive signals from the source on orthogonal channels; furthermore, 
the destination also receives transmissions from the relay on its (the destination's) channel. The 
orthogonal model implicitly imposes a half-duplex transmission and reception constraint on the 
relay. For this channel, in the absence of an eavesdropper. El Gamal and Zahedi showed that a 
partial decode-and-forward (PDF) strategy in which the source transmits two messages on the 
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two orthogonal channels and the relay decodes its received signal, achieves the capacity. 

We study the secrecy capacity of this channel for both the discrete memoryless and Gaussian 
channel models. As a first step towards this, we develop a PDF strategy for the full-duplex relay 
eavesdropper channel and extend it to the orthogonal model. Further, since the eavesdropper can 
receive signals from either orthogonal channel or both, three cases arise in the development of 
the secrecy capacity. We specialize the outer bounds developed in [11] for the orthogonal case 
and show that for the discrete memoryless channel, PDF achieves the secrecy capacity for the 
two cases where the eavesdropper receives signals in only one of the two orthogonal channels. 

For the Gaussian model, we develop two new outer bounds using recent results on the secrecy 
capacity of the Gaussian multiple-input multiple-output channels in the presence of a multi- 
antenna eavesdropper (MIMOME) in [4-6]. The first outer bound is a genie-aided bound that 
allows the source and relay to cooperate perfectly resulting in a Gaussian MIMOME channel 
for which jointly Gaussian inputs maximize the capacity. We show that these bounds are tight 
for a sub-class of channels in which the multiaccess channel from the source and relay to the 
destination is the bottleneck link, and the eavesdropper is limited to receiving signals on the 
channel from the source and the relay to the destination. For a complementary sub-class of 
channels in which the source-relay link is unusable due to noise resulting in a deaf relay, we 
develop a genie-aided bound where the relay and destination act like a two-antenna receiver. We 
also show that noise forwarding achieves this bound for this sub-class of channels. 

In [14], the authors study the secrecy rate of the channel studied here under the assumption 
that the relay is co-located with the eavesdropper and the eavesdropper is completely cognizant 
of the transmit and receive signals at the relay. The authors found that using the relay does not 
increase the secrecy capacity and hence there is no security advantage to using the relay. In this 
paper, we consider the eavesdropper as a separate entity and show that using the relay increases 
the secrecy capacity in some cases. In the model of [14], the eavesdropper can overhear only on 
the channel to the relay, while we consider three cases in which the eavesdropper can overhear 
on either or both the channels. 

The paper is organized as follows. In Section II, we present the channel models. In Section 
III, we develop the inner and outer bounds on the secrecy capacity of the discrete memoryless 
model. We illustrate these results with examples in Section IV. In Section V, we present inner 
and outer bounds for the Gaussian channel model and illustrate our results with examples. We 
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conclude in Section VI. 

II. Channel Models and Preliminaries 

A. Discrete Memoryless Model 

A discrete-memory less relay eavesdropper channel is denoted by (Afi xA'2, yi, 7/2^1, 2:2) , 
iVi X 3^2) such that the inputs to the channel in a given channel use are Xi e Xi and X2 e X2 at 
the source and relay, respectively, the outputs of the channel are Yi e y^, Y & and Y2 e 3^2> 
at the relay, destination, and eavesdropper, respectively, and the channel transition probability 
is given by pYYiY2\xx2{y^yi^y2\x.,X2) [U]. The channel is assumed to be memoryless, i.e. the 
channel outputs at time i depend only on channel inputs at time i. The source transmits a message 
Wi e Wi — {1, 2, • • • , M} to the destination using the (M, n) code consisting of 

1) a stochastic encoder / at the source such that / : Wi — > X" e X^, 

2) a set of relay encoding functions : (1^,1, 1^1,2, • • • , ^2,1 at every time instant 
i, and 

3) a decoding function at the destination ^ -.y^ ^ Wi. 
The average error probability of the code is defined as 

P2 = ^ -^Pr{$(y") ^ wil^iwas sent}. (1) 

The equivocation rate at the eavesdropper is defined as Re — ^H{W]\Y2). A perfect secrecy 
rate of Ri is achieved if for any e > 0, there exists a sequence of codes (M, n) and an integer 
N such that for all n> N, we have 

i?i = -log2M, (2) 
n 

< e and (3) 

-H{Wi\Y2)>Ri-e. (4) 
n 

The secrecy capacity is the maximum rate satisfying (2)-(4). The model described above considers 
a relay that transmits and receives simultaneously in the same orthogonal channel. Inner and 
outer bounds for this model are developed in [11, Theorem 1]. 

In this paper, we consider a relay eavesdropper channel with orthogonal components in which 
the relay receives and transmits on two orthogonal channels. The source transmits on both 
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Fig. 1. The relay-eavesdropper channel with orthogonal components. 



channels, one of which is received at the relay and the other at the destination. The relay transmits 
along with the source on the channel received at the destination. Thus, the source signal Xi 
consists of two parts Xr e Xr and Xd e Xd, transmitted to the relay and the destination, 
respectively, such that Xi = x Xr. The eavesdropper can receive transmissions in one or 
both orthogonal channels such that 12,1 G 3^2,i denotes the received signal at the eavesdropper 
in orthogonal channel i, i — 1,2, and = 3^2,i x J^2,2- More formally, the relay eavesdropper 
channel with orthogonal components is defined as follows. 

Definition 1: A discrete-memoryless relay eavesdropper channel is said to have orthogonal 
components if the sender alphabet Xi — Xd x Xr and the channel can be expressed as 

p{y,yi,y2\xi,x2) ^ p{yi,y2,i\xR,x2) ■ p{y,y2,2\xD,x2). (5) 

Definition 1 assumes that the eavesdropper can receive signals in both channels. In general, the 
secrecy capacity bounds for this channel depend on the receiver capabilities of the eavesdropper. 
To this end, we explicitly include the following two definitions for the cases in which the 
eavesdropper can receive signals in only one of the channels. 

Definition 2: The eavesdropper is limited to receiving signals on the channel from the source 
to the relay, if 

yi, y2,i, y2,2\xR, xd, X2) = y2,ikii, X2) ■ p{y\xD: X2) ■ p{y2,2)- (6) 
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Definition 3: The eavesdropper is limited to receiving signals on the channel from the source 
and the relay to the destination, if 

yi, y2,i, y2,2\xR, xd, X2) = p{yi\xR, X2) ■ p{y, ^2,2^0, X2) • p(y2,i)- U) 

Remark 1: In the absence of an eavesdropper, i.e., for ^2,1 = 2/2,2 = 0, the channels in (5)-(7) 
simplify to that of a relay channel with orthogonal components. 

Thus, depending on the receiver capabilities at the eavesdropper, there are three cases that 
arise in developing the secrecy capacity bounds. For brevity, we henceforth identify the three 
cases as cases 1, 2, and 3, where cases 1 and 2 correspond to Definitions 2 and 3, respectively, 
and case 3 is the general case where the eavesdropper receives signals from both the channels. 

B. Gaussian Model 

For a Gaussian relay eavesdropper channel with orthogonal components, the signals Yi and 



Y received at the relay and the destination respectively in each time symbol i e {!,■ • ■ , n}, are 

Yi\l] = hs,rXR[l] + Zi[l] (8) 

and 

Y[i] = hs,dXD[i] + hr,dX2[l] + Z[i] (9) 



where hk,m is the channel gain from transmitter k e {s, r} to receiver m e {r, d}, and where 
Zi and Z are zero mean unit variance Gaussian random variables. The transmitted signals Xr, 
Xd, and X2 are subject to average power constraints given by 

E[x%] < Pr, 

E[^Eti^l]<PD, and (10) 
where E[.] denotes expectation of its argument. The signals at the eavesdropper are 

Y2,l\i]^h,,,,,XR[i\le,l + Z2,l\i] (11) 
^2,2^ = hs,e,2XD[^\'^e,2 + /ir,e^2Hle,2 + ^2,2 [^] (12) 

where hs,e,i and hs,e,2 are the channel gains from the source to the eavesdropper in the two 
orthogonal channels, /ir,e is the channel gain from the relay to the eavesdropper, ^2,1 and ^2,2 
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are zero-mean unit variance Gaussian random variables assumed to be independent of the source 
and relay signals, and 

{1 if the eavesdropper can eavesdrop in orthogonal channel j — 1,2 
otherwise. 

Throughout the sequel, we assume that the channel gains are fixed and known at all nodes. 

For a relay channel with orthogonal components, the authors of [15] show that a strategy 
where the source uses each channel to send an independent message and the relay decodes the 
message transmitted in its channel, achieves capacity. Due to the fact that the relay has partial 
access to the source transmissions, this strategy is sometimes also referred to as partial decode 
and forward (see [16]). The achievable scheme involves block Markov superposition encoding 
while the converse is developed using the max-flow, min-cut bounds. The following proposition 
summarizes this result. 

Proposition 1 ([15]): The capacity of a relay channel with orthogonal component is given by 
C = maxmin (7(Xr; ¥^1X2) + I{Xn] Y\X2), I{XrXdX2] Y)) (13) 
where the maximum is over all input distributions of the form 

p{x2)p{xr\x-2)p{xd\x2). (14) 

For the Gaussian model, the bounds in (13) are maximized by jointly Gaussian inputs transmitting 
at the maximum power and subject to (14). 

Remark 2: While the converse allows for all possible joint distributions of Xr, X^, and X2, 
from the form of the mutual information expressions in (13), it suffices to consider distributions 
only of the form given by (14). 

We use the standard notation for entropy and mutual information [17] and take all logarithms 
to the base 2 so that our rate units are bits. For ease of exposition, we write C (x) to denote 
I log {1 + x), and write x'^ to denote max(a;, 0). We also write random variables with uppercase 
letters (e.g. Wk) and their realizations with the corresponding lowercase letters (e.g. Wk). We 
drop subscripts on probability distributions if the arguments are lowercase versions of the 
corresponding random variables. Finally, for brevity, we henceforth refer to the channel studied 
here as the orthogonal relay eavesdropper channel. 
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III. Discrete memoryless Channel: Outer and Inner Bounds 

In this section, we develop outer and inner bounds for the secrecy capacity of the discrete- 
memoryless orthogonal relay eavesdropper channel. The proof of the outer bounds follows along 
the same lines as that in [11, Theorem 1] for the full-duplex relay-eavesdropper channel and is 
specialized for the orthogonal model considered here. The following theorem summarizes the 
bounds for the three cases in which the eavesdropper can receive in either one or both orthogonal 
channels. 

Theorem 1: An outer bound on the secrecy capacity of the relay eavesdropper channel with 
orthogonal components is given by 

Case 1 : C, < me^4mm{I {VdVr; YYi\V2U), /(Vd^s; Y\U)} - I{Vr; Y2\U)] + 
Case 2 : C, < max[mm{I{VDVR; YYi\V2U), I{VdV2] Y\U)} - I{VdV2] Y2\U)]+ (15) 
Case 3 : < max[min{/(\/^VR; FFil^f/), /(^d^2; Y\U)] - I{VnVDV2; Y^W)^ 
where [/, Vd, Vr and V2 are auxiliary random variables, and the maximum is over all joint 
distributions satisfying U ^ [Vr, Vd, V^) ^ {Xr, Xn, X2) ^ {Y, Y^, Y2). 

Proof: The proof is extended from the outer bound in [11, Theorem 1] to include auxiliary 
random variables corresponding to each of the transmitted signals and is developed in Appendix 
A. ■ 
Following Proposition 1, a natural question for the relay-eavesdropper channel with orthogonal 
components is whether the PDF strategy can achieve the secrecy capacity. To this end, we first 
develop the achievable PDF secrecy rates for the class of full-duplex relay-eavesdropper channels 
and then specialize the result for the orthogonal model. The following theorem summarizes the 
inner bounds on the secrecy capacity achieved by PDF for the full-duplex (non-orthogonal) 
relay-eavesdropper channels. 

Theorem 2: An inner bound on the secrecy capacity of a full-duplex relay eavesdropper 
channel, achieved using partial decode and forward, is given by 

> mm{IiX^;Y\X2,V) + I{V;Y,\X2),I{X^X2V;Y)} - I{X,X2;Y2) (16) 

for all joint distributions of the form 

p{v)p{xi\v)p{x2\v)p{yi, y\xi, X2). (17) 
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Proof: The proof is developed in Appendix B and uses block Markov superposition encoding 
at the source such that in each block, the relay decodes a part of the source message while the 
eavesdropper has access to both source messages. ■ 

The following theorem specializes Theorem 2 for the orthogonal relay-eavesdropper channel. 

Theorem 3: An inner bound on the secrecy capacity of the orthogonal relay eavesdropper 
channel, achieved using partial decode and forward over all joint distributions of the form 
p{xr, xd: X2), is given by 

Case 1 : > min{/(XzpX^; FFilXs), /(Xz^Xs; Y)} - I{Xr- Y^) 

Case 2 : > min{/(X,;X^; FF1IX2), /(X^X2; Y)] - I{Xd, X2; K,) 

Case 3 : > min{/(XoX^; ^1X2), /(X^Xs; Y)} - I{Xr- 1^21X2) - /(X^, X2; Y^) 

(18) 

Proof: The proof is developed in Appendix C and involves specializing the bounds in 
Theorem 2 for the orthogonal model. It is further shown that the input distribution can be 
generalized to all joint probability distributions p{xr, xd, X2). ■ 
The bounds in (18) can be generalized by randomizing the channel inputs. We now prove that 

PDF with randomization achieves the secrecy capacity. 

Theorem 4: The secrecy capacity of the relay channel with orthogonal complements is 

Case 1 : C, = ^&4^ui{I{VdVr]YY^\V2U),I{VdV2]Y\U)} - I{Vr-Y2\U)\ + 
Case 2 : C,^uiB4min{I{VDVR]YY^\V2U)J{VDV2]Y\U))-I{VDV2]Y2\U)]+ (19) 
Case 3 : < max[min{/(l^^FR; yYil W), /(\/z5\/2; - I{VrVdV2;Y2\U)Y 

where f/, Vd, Vr and V2 are auxiliary random variables, and the maximum is over all joint 
distributions satisfying U (Vr, Vd, V2) {Xr,Xu-,X2) — > {Y,Y-i,Y2). Furthermore, for 
Case 3, 

Cs > [imn{I{VnVR- YY,\V2U), I{VnV2; Y\U)} - I{Vr- Y2\V2U) - I{Vd, V2; ^2!^)]+ (20) 

for all joint distributions satisfying U (Vr, Vd, V2) (Xr, Xd, X2) (Y, Yi, Y2). 

Proof: The upper bounds follow from Theorem 1. For the lower bound, we prefix a mem- 
oryless channel with inputs Vr, Vd, and V2 and transition probability p{xr, xd, X2\vr,vd,V2) 
(this prefix can potentially increase the achievable secrecy rates as in [2, 11]). The time-sharing 
random variable U ensures that the set of achievable rates is convex. ■ 
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Remark 3: In contrast to the non secrecy case, where the orthogonal channel model simplifies 
the cut-set bounds to match the inner PDF bounds, for the orthogonal relay-eavesdropper model in 
which the eavesdropper receives in both channels, i.e., when the orthogonal receiver restrictions 
at the relay and intended destination do not apply to the eavesdropper, in general, the outer 
bound can be strictly larger than the inner PDF bound. 

In the following section, we illustrate these results with three examples. 

IV. Examples 

Example 1: Consider a orthogonal relay eavesdropper channel with = Xu = = {0, 1}. 
The outputs at the relay and destination are given by 

Y^^Xr and (21) 
Y = XdX2, (22) 

while the output at the eavesdropper is 

^2,1 = (channel 1) and 

{1 if < ^ ^ (23) 

(channel 2). 
otherwise 

Since the destination can receive at most 1 bit in every use of the channel, the secrecy capacity 
of this channel is at most 1 bit per channel use. We now show that this secrecy capacity can be 
achieved. In each channel use, let the source send bit tt; G {0, 1} such that Xr = 0, X^, = w, 
and X2 = I. Since X2 = 1, the receiver obtains w while the eavesdropper receives ^2,1 = 
and 1^2,2 = 1 irrespective of the value of bit w. Hence, a perfect secrecy capacity of 1 can be 
achieved. 

The code design in Example 1 did not require randomization. We now present an example 
where randomization is necessary. 

Example 2: Consider an orthogonal relay eavesdropper channel where all the input and output 
alphabets are the same and given by {0,1}^. We write Xr = (aR.bR), Xd = {an, bo), and 
^2 — (oi, bi) to denote the vector binary signals at the source and the relay. The outputs of this 
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channel, shown in Figure 2(a), at the relay, destination, and the eavesdropper are given by 



Y ^ {aD,bD®ai), (24) 

Y,^iaR,bR), (25) 

Y2,i = (oi?, bn) and (26) 

Y2,2^(ai,bi®aD), (27) 



where © denotes the binary XOR operation. The capacity of this channel is at most 2 bits per 
channel use as the destination, via Y, can receive at most 2 bits per channel use. We will now 
show that a secrecy capacity of 2 bits per channel use can be achieved. Consider the following 
coding scheme. In every channel use, the relay flips an unbiased coin to generate a bit n e {0, 1} 
such that its transmitted signal is 

^2 = (0,n). 

In every use of the channel, the source transmits 2 bits, denoted as wi and W2, using 

Xr={0,0) and 

Xd = {wi,W2). 

For these transmitted signals, the receiver and eavesdropper receive 

Y^{wi,W2), (28) 
y2,i = (0,0) and (29) 
^2,2 = (0,ne«;i). (30) 

Thus, the receiver receives both bits while the eavesdropper is unable to decode any information 
due to the randomness of n. This is an example where transmitting a random code from the 
relay is required to achieve the secrecy capacity. 

In the above two examples, the source to relay link was completely available to the eaves- 
dropper and hence the relay could at best be just used to send random bits. In the next example, 
we show that the secrecy capacity is achieved by the relay transmitting a part of the message 
as well as a random signal. 

Example 3: Consider an orthogonal relay eavesdropper channel where the input and output 
signals at the source, relay, and destination are binary two-tuples while 3^2,1 and 3^2,2 at the 
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(a) Example 2 (b) Example 3 

Fig. 2. Orthogonal relay eavesdropper channel model of Examples 2 and 3. 

eavesdropper are binary alphabets. We write Xr = {aR,bR), Xn = ao and X2 = (ai,6i) to 
denote the vector binary signals at the source and the relay. The outputs at the relay, destination 
and the eavesdropper are also vector binary signals given by 



Y^{ai,aD), (31) 

Y, = {aRM). (32) 

1^2,1 = (M and (33) 

12,2 = (61 ®a^), (34) 



as shown in Figure 2(b). As in the previous example, the capacity of this channel is also at most 
2 bits per channel use. We now show that a secrecy capacity of 2 bits per channel use can be 

achieved for this example channel. Consider the following coding scheme: in the i*'* use of the 
channel, the source encodes 2 bits, denoted as wi^i and W2,i as 

Xr = {wi^i, 0) and 

Xd = {W2,i)- 

The relay receives in the previous use of the channel. Furthermore, in each channel use, 

it also generates a uniformly random bit n,, and transmits 

X2^ {wi^i^i,ni). (35) 
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With these transmitted signals, the received signals at the receiver and the eavesdropper are 

F = (wi,i_i,W2,j), (36) 
y2,i = (0) and (37) 

Y2,2 = {ni®W2,i). (38) 

Thus, over n + 1 uses of the channel the destination receives all 2n + l bits transmitted by the 
source. On the other hand, in every use of the channel, the eavesdropper cannot decode either 
source bit. 

V. Gaussian Model 

A. Inner and Outer Bounds 

We now develop inner and outer bounds for the Gaussian orthogonal relay eavesdropper 
channel. Determining the optimal input distribution for all the auxiliary random variables in the 
outer bounds in Theorem 4 is not straightforward. To this end, we develop new outer bounds 
using a recent result on the secrecy capacity of the class of Gaussian multiple input, multiple 
output, multi-antenna eavesdropper channels (see [4-6]). The class of MIMOME channels is 
characterized by a single source with an m x 1 vector input X and A; x 1 and txl vector outputs 
Y and Ye at the intended destination and eavesdropper, respectively, given by 

Y[i] = HXM + and 

LJ LJ LJ ^3^^ 

Ye[i] = HeX[i] + Ze[i] 

where in every channel use i, T^i] and Ze[i] are zero-mean Gaussian vectors with identity 
covariance matrices that are independent across time symbols. The channel input satisfies an 
average transmit power constraint: 

- iix||^ < p. (40) 

In applying the multi-antenna secrecy capacity results, we develop an outer bound in which the 
source and relay are modeled jointly as a multi-antenna transmitter. However, unlike the average 
power constraint for the MIMOME channels in (40), our outer bound requires a per antenna 
power constraint. To this end, we apply the results developed in [5] in which a more general 
transmitter covariance constraint is considered such that 

i^;jxWx-W)dS (41) 
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where S is a positive semidefinite matrix and A :< B denotes that B—Aisa positive semidefinite 
matrix. The secrecy capacity of this channel is summarized in the following theorem. 

Lemma 1 ([5]): The secrecy capacity of the MIMOME channel of (39) subject to (41) is 
given by 

C,= max fllogdet(l + HKxH^) -^logdet(l + HeKxHf)V (42) 
Remark 4: The expression in (42) can also be written as 

Cs = max[/(X*; Y) - /(X*; Ye)] (43) 

where he maximum is over all X* ~ A/'(0, Kx) ■ 

We now present an outer bound on the Gaussian orthogonal relay eavesdropper channel using 
Lemma 1. 

Theorem 5: An outer bound on the secrecy capacity of the Gaussian orthogonal relay eaves- 



dropper channel is given by 

Case 1 : C, < max[/(XDX2; F) - /(Xr; F2)] (44a) 

Case 2 : < max[/(XBX2; F) - /(X^Xa; ^2)] (44b) 

Case 3 : C, < max[7(X^X2; - /(XrX^Xs; Fs)] (44c) 



where the maximum is over all [Xr Xd X2f ~ 7V(0, Kx) where Kx = £;[XX'^] has diagonal 
entries that satisfy (10). 

Remark 5: In (44a) and (44c), the Xj^ maximizing the outer bound on the secrecy capacity 
is Xr — 0. On the other hand, Xr can be chosen to be arbitrary for (44b). 

Proof: An outer bound on the secrecy capacity of the relay eavesdropper channel results 
from assuming that the source and relay can cooperate over a noiseless link without causality 
constraints. Under this assumption, the problem reduces to that of a MIMOME channel. Thus, 
applying Lemma 1 and using the form in (43), for X — [Xr Xd -^2]^ ~ -A/^lO, Kx), the secrecy 



capacity can be upper bounded as 

< maxiliXRXoX^; Y) - I{XrXdX2; Y^)] (45) 

= max[7(Xz,X2; Y) + I(Xr; YlXnX^) - I{XrXdX2; Y-,)] (46) 

= max[/(XflX2; Y) - I{XrXdX2; F2)] (47) 
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where (47) follows from the orthogonal model in (5). Finally, applying the conditions on the 
eavesdropper receiver for the three cases simplifies the bounds in (47) to (44). ■ 
The PDF inner bounds developed in Section III for the discrete memory less case can be 
applied to the Gaussian model with Gaussian inputs at the source and relay. In fact, for all three 
cases, the inner bounds require taking a minimum of two rates, one achieved jointly by the source 
and relay at the destination and the other achieved by the source at the relay and destination. 
Comparing the inner bounds in (18) with the outer bounds in (44), for those channels in which 
the source and relay are clustered close enough that the bottle-neck link is the combined source- 
relay link to the destination and the eavesdropper overhears only the channel from the source 
and the relay to the destination, the secrecy capacity can be achieved. This is summarized in the 
following theorem. 

Theorem 6: For a class of clustered orthogonal Gaussian relay channels with 

I{XdX2;Y)< max /(X^X^; FF1IX2), (48) 
the secrecy capacity for case 2 is achieved by PDF and is given by 

Case 2 : = max[/(XDX2; F) - /(Xz,, X2; ^2)] (49) 

where the maximum is over X = [Xr Xd ^2]^ ~ A/^(0, Kx). 

For a relay channel without secrecy constraints, the cut-set outer bounds are equivalent to 
two multiple-input multiple-output (MIMO) bounds, one that results from assuming a noiseless 
source-relay link and the other that results from assuming a noiseless relay-destination link. 
Under a secrecy constraint, the outer bound in Theorem 5 is based on the assumption of a 
noiseless source-relay link. The corresponding bound with a noiseless relay-destination link 
remains unknown. 

We now consider a sub-class of Gaussian orthogonal relay eavesdropper channels for which 
hg^r = 0. For this sub-class, the source does not send any messages on channel 1, i.e., Xr = 0. 
Such a sub-class is a subset of a larger sub-class of channels with very noisy unreliable links 
from the source to the relay. We present an upper bound on the secrecy capacity for this sub- 
class and show that the noise-forwarding strategy introduced in [11] achieves this outer bound. 
Central to our proof is an additional constraint introduced in developing the outer bounds on the 
eavesdropper that it does not decode the relay transmissions. Clearly, limiting the eavesdropper 
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capabilities can only improve the secrecy rates, and thus, an outer bound for this channel with a 
constrained eavesdropper is also an outer bound for the original channel (with hg^r = in both 
cases) with an unconstrained eavesdropper. We show that the outer bound for the constrained 
channel can be achieved by the strategy of noise-forwarding developed for the unconstrained 
channel. 

Theorem 7: The secrecy capacity of a sub-class of Gaussian orthogonal relay eavesdropper 
channels with hs,r — for Cases 2 and 3 is given by 

C{\h,,a\'E[Xl]) - C {%,eA^E[Xl]/{l + \hr,e?E[Xl]))] . (50) 

Proof: Outer Bound: An outer bound on the secrecy capacity is obtained by applying 
Theorem 5 for Cases 2 and 3 as 

Cs < max[7(XDX2; Y) - I{XdX2] Y2)] (51) 

= max [C{\hsA'E[Xl] + ^A^'EiXl]) - C{\hs,e,2?E[Xl] + \KA'E[XI])] 

E[XbY<Pd,E[X2]^<P2 

(52) 

where (52) holds because hs,r — implies Xji — 0. This follows from the fact that due to a lack 
of a communication link between the source and the relay, i.e., hg^r — 0, the relay is oblivious to 
the source transmissions. Since the relay and the source do not share common randomness, one 
can set Xn = 0. Further, since X2 depends on Xd only via X^ and X^ = 0, X2 is independent 
of Xf). Finally, the optimality of Gaussian signaling follows from Theorem 5. 

We now develop a second outer bound under the assumption that the relay and the destination 
have a noiseless channel such that they act like a two-antenna receiver. One can alternately 
view this as an improved channel that results from having a genie that shares perfectly the 
transmitted and received signals at the relay with the destination. Since X2 is independent of 
Xd, the destination can perfectly cancel X2 from its received signal, and thus, from (9), the 
effective received signal at the destination can be written as 

¥' = hg^dXD + Z. (53) 

On the other hand for the constrained eavesdropper, since the relay's signal X2 acts as interference 
and is independent of Xd, the information received at the eavesdropper is minimized when X2 
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is the worst case noise, i.e., when it is Gaussian distributed [18, Theorem n.l]. The equivalent 
signal received at the eavesdropper is then 

^2,2 = K,e,^XD + ^^/K!^|2i[X|]TlZ^,2 (54) 

where Z'^ 2 is Gaussian with zero mean and unit variance. Thus, the constrained eavesdropper 
channel simplifies to a MIMOME channel with a single- antenna source transmitting Xo and 
single-antenna receiver and eavesdropper receiving Y' and Y2 2, respectively. For this channel, 
from Lemma 1, the secrecy capacity of this constrained eavesdropper channel is upper bounded 
as 

Cs < max [C{\K,a\'E[Xl]) - C {\hs,e,i\'E[Xl]/{^ + \hr,e\' E[Xi]))]. (55) 

Finally, since (55) is an upper bound for the channel with an eavesdropper constrained to ignore 
X2, it is also an upper bound for the channel in which the eavesdropper is not constrained. 

Inner Bound: The lower bound follows from the noise forwarding strategy introduced in [11, 
Theorem 3]. In this strategy, the relay sends codewords independent of the source message, 
which helps in confusing the eavesdropper. The noise forwarding strategy transforms the relay- 
eavesdropper channel into a compound multiple access channel, where the source/relay to the 
receiver is the first multiple access channel and the source/relay to the eavesdropper is the second 
one. ■ 



B. Illustration of Results 

We illustrate our results for the Gaussian model for a class of linear networks in which the 
source is placed at the origin and the destination is unit distance from the source at (1,0). The 
eavesdropper is at (1.5,0). The channel gain hm,k, between transmitter m and receiver k, for 
each m and k, is modeled as a distance dependent path-loss gain given by 

hm,k = -4/2 for all m e {s,r},k e {r, d, e} (56) 

where a is the path-loss exponent. The maximum achievable PDF secrecy rate is plotted as 
a function of the relay position along the line connecting the source and the eavesdropper as 
shown in Figure V-B. Furthermore, as a baseline assuming the relay does not transmit, i.e., 
Xr — 0, the secrecy capacity of the resulting direct link and the wire-tap channel for cases 2 
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and 3, respectively, are included in all three plots in Fig. V-B. The rates are plotted in separate 
sub-figures for the three cases in which the eavesdropper receives signals in only one or both 
channels. In all cases, the path loss exponent a is set to 2 and the average power constraint 
on X/j, Xd , and X2 is set to unity. In addition to PDF, the secrecy rate achieved by noise 
forwarding (NF) is also plotted. 
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Fig. 3. Source is at (0, 0), destination at (1, 0) and eavesdropper is at (1.5, 0). A distance fading model with a = 2 is taken 
and power constraints for Xr, Xd and X2 are all unity. 



In Fig V-B, for all three cases, the PDF secrecy rates are obtained by choosing the input signal 
X = [Xr Xd X2]^ to be Gaussian distributed and numerically optimizing the rates over the 
covariance matrix Kx = E[X.X.^] (more precisely the three variances of Xr, Xd, X2 and the 
pairwise correlation among these three variables). We observe that the numerical results match 
the theoretical capacity result for Case 2 that PDF is optimal when the relay is close to the 
source. Further, the upper bounds for Case 2 and Case 3 are the same as seen also in (44b)- 
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(44c). On the other hand, when the relay is farther away than the eavesdropper and destination 
are from the source, there are no gains achieved by using the relay relative to the non-relay 
wiretap secrecy capacity. Finally, for cases 2 and 3, NF performs better than PDF when the 
relay is closer to the destination. 

VI. Conclusions 

We have developed bounds on the secrecy capacity of relay eavesdropper channels with 
orthogonal components in the presence of an additional passive eavesdropper for both the 
discrete memoryless and Gaussian channel models. Our results depend on the capability of 
the eavesdropper to overhear either or both of the two orthogonal channels that the source uses 
for its transmissions. For the discrete memoryless model, when the eavesdropper is restricted to 
receiving in only one of the two channels, we have shown that the secrecy capacity is achieved 
by a partial decode-and-forward strategy. 

For the Gaussian model, we have developed a new outer bound using recent results on 
the secrecy capacity of Gaussian MIMOME channels. When the eavesdropper is restricted to 
overhearing on the channel from the source and the relay to the destination, our bound is tight for 
a sub-class of channels where the source and the relay are clustered such that the combined link 
from the source and the relay to the destination is the bottleneck. Furthermore, for a sub-class 
where the source-relay link is not used, we have developed a new MIMOME-based outer bound 
that matches the secrecy rate achieved by the noise forwarding strategy. 

A natural extension to this model is to study the secrecy capacity of orthogonal relay channels 
with multiple relays and multiple eavesdroppers (see, for example, [19]). Also, the problem of 
developing an additional outer bound that considers a noiseless relay destination link remains 
open for the channel studied here. 
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Proof of Theorem 1 

In this section, we will prove the upper bounds on the secrecy capacity for all the three cases. 
Following a proof similar to that in [11, Theorem 1], we bound the equivocation as 

n 

nRe < Y1[I{W^■, nY'-\ Y,%,) - I{W,; Y2,i\Y'-\ Y,%,)] + nSr,. (57) 

i=l 

Now, let J be a random variable uniformly distributed over {1, 2, • • • , n} and set U — JF'~^Y'2^i+i' 
Vr = JY2,i+iWi, Vd = JY^%2Wi, V2 = JY'-\ Y, = Y,,j, Y^ = Y2,j and F = Yj. We speciaUze 
the bounds in (57) separately for each case. 

A. Case 1 

From (57), we have 

1 " 

Th 

i=l 
1 " 



n . 
1=1 



= I{Vd, V2; Y\U) - I{Vr; Y2\U)+ (58) 
Furthermore, 

Re<- Y^iHWi; Y,\Y^-\ Y,%,) - I{W^■, Y2,\Y^-\ F^.+J] + <5„ 
^ i=i 

1 " 

^ i=i 
1 " 



n 



= /(Vd, Vr, V^- y, Y^\V^, U) - I{Vr- Y^W) + (59) 
This proves the upper bound for case 1. 
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B. Case 2 

From (57), we have 



1 " 

Re<- J2[^{W,;nY^-\ Y-^^,) - I{W,- Y2,\Y'-\ + 5. 

lb . 

1=1 



1 " 

- Y-^^,, Y^-\ Y,\Y^-\ Y-^^,) - I{W,, Y^^^,, Y^-\ Y,,^Y^-\ + 6^ 



n . 

1=1 



= liVD, V2; Y\U) - liVD, V2; Y2\U)+ 5„. (60) 

Furthermore, 

1 " 

Re<- J2i^{W^■, F.|r-\ Y^,+^ - I{W^■, Y,,\Y'^-\ Y^,^,)] + 5„ 



1=1 



n 

= - E[^(^i' ^^m. ^il^^"'. ^^i+i) - AW^i, ^^.+2, Y,,\Y^-\Y,^,^,)] + 5^ 

i=l 
1 " 

< - J2[i{w„ Y,%„ Y'-\ y„ yi,,|y-\ y^.^,) - i{w,, y,%„ y'-'- y,,^y'-\ y^.^,)] + 5„ 



1=1 



= /(^D, Vr, V2, y, yil^s, c/) - i{Vd. 1^2; i^2|c/) + m 

This proves the upper bound for case 2. 

C. Case 3 
From (57), we have 

1 " 

< - Yl^HWi; Yi\Y'~\ Y,%,) - I{Wv, Y2,i\Y'-\ Y,%,)] + 5^ 

1=1 

= I i^^nwi, y^.+2, Y'-'; nY'-\ Y,%,) - i{w,, y^,+i, Y'-'; y,,\y'-\ y^,+j] + 

i=l 

= I(Vd, V2; Y\U) - I(Vr, Vd, V2; Y2\U) + 5n. (62) 
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Furthermore, 

1 " 

Re<- Y^^iw,- Y,\Y^-\ r^^^j - liw,- Y^,^Y'-\ + K 

i=l 

1 " 

= - E[^(^i' ^^m. ^^1^'"'. Y2,i+i) - i{Wi, y2^+i. Y'-'; Y2,\Y'-\ Y,%,)] + 5^ 

1=1 

^ I E[^(^i' ^^^+1' Y'-\ Y,, Y,,^Y'-\ Y,%,) - I{W„ Y^,^„ Y'-'; Y,,\Y'-\ y^,^,)] + 5„ 

1=1 

= HVd, Vr, V2; Y, Y^\V2, U) - I{Vd, V2; Y2\U)+ (63) 

This proves the upper bound for case 3. For perfect secrecy, setting Ri — Re yields the upper 
bound on the secrecy capacity. 

Appendix B 

Proof of Theorem 2: PDF for relay eavesdropper channel 
Random Coding: 

1) Generate 2"(^(^2;>")-e) independent and identically distributed (i.i.d.) X2's, each with prob- 
ability p(x2) = nf^ip(x2i). Label them X2{m), m e [1, 2"(^(^2;y)-e)]_ 

2) For each X2{m), generate 2"^^ i.i.d. v's, each with probability p(v|x2(m)) = n"^ip(i>i|x2j(m)). 
Label these v{w'\m), w e [l,2"^i]. 

3) For every v{w'\m), generate 2^*^^ i.i.d. xi's, each with probability p{xi\v{w'\m)) = 
Ilf^ip{xii\vi{w'\m)). Label these xi{w"\m,w'), tu" G [l,2"-^2]. 

Random Partition: Randomly partition the set {1, 2, 2'*^^} into 2'*(^(-^2;r)-e) ^g^^ 
Encoding: Let Wi be the message to be sent in block i where the total number of mes- 
sages is 2"(-f^i+-f^2-/(XiX2;y2))_ Further, let Qi = {wi,k) where k e {1, 2, 2"-f(^i^2:r2)-}._ 

can further partition gi into two parts {w[,w'l) of rates Ri and R2 respectively. Assume that 

{yi{i — 1), f (w-_Jmj_i), a;2(mj_i)) are jointly e— typical and w^_^ G Srm- Then the codeword 
{xi{w'l\mi^w'j),X2{'rni)) will be transmitted in block i. 
Decoding: At the end of block i, we have the following: 

1) The receiver estimates by looking at jointly e-typical X2{mi) with yj. For sufficiently 
large n, this decoding step can be done with arbitrarily small probability of error. Let the 
estimate of m, be m, . 
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2) The receiver calculates a set Li(y(z— 1)) of w' such that w' e Li(y(i— 1)) if {v{w'\mi^i),y{i- 
1)) are jointly e-typical. The receiver then declares that was sent in block i — 1 if 
w'-_^ e S'm-nLi(y(i — 1)). The probability that w[_^ = wl_^ with arbitrarily high probability 
provided n is sufficiently large and Ri < /(X2; Y) + I{V; Y\X2) — e. 

3) The receiver declares that w'-_i was sent in block i — 1 if {xi{w'-_i\mi^i, wl_^),y{i — 1)) 
are jointly e— typical. w'-_i — w'-_i with high probability if R2 — I{Xi; Y\X2, V) — e and 
n is sufficiently large. 

4) The relay upon receiving yi{i) declares that w' was received if {v{w'\mi),yi{i),X2{mi)) are 
jointly e— typical, w'^ = w' with high probability if Ri < I{V; yi|X2) and n is sufficiently 
large. Thus, the relay knows that w- e 'S'^j+i. 

Thus, we obtain 

Ri < /(X2; Y) + I{V- Y\X2) - e, (64) 
Ri < I{V-Yi\X2) and (65) 
R2 = I{Xr,Y\X2,V)-e. (66) 

Therefore, the rate of transmission from Xi to Y is bounded by 



R^Ri + R2- I{XiX2; Y2) (67) 
= min{7(Xi; Y\X2, V) + I{V; Y,\X2), I(X,X2V; Y)} - Y2). (68) 

Equivocation Computation: From [11, Theorem 2, Equation (41)], we have 

H{Wi\Y2) > H{X,) ~ I{X,,X2;Y2) - H{X,,X2\Wi,Y2). (69) 

Consider H{Xi, X2\Wi,Y2). Since we know Wi, the only uncertainty is the knowledge of k 
which can be decoded from Y2 with arbitrarily small probability of error since k e {1, .., 2"^(^i^2;i2) j. 
Hence, 

^^(^^111^2) > n{Ri + R2) - /(Xi, X2; Y2) = nR (70) 

thus giving R^ — R and hence we get perfect secrecy. 
Thus, the secrecy rate is given by 

R = min{/(Xi; Y\X2, V) + I{V- Y^\X2), I{X^X2V; Y)} - I{X,X2; Y2). (71) 
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Appendix C 

Proof of Theorem 3: PDF for relay eavesdropper channel with orthogonal 

COMPONENTS 

From Theorem 2, a secrecy rate of 

R = min{/(Xi; F|X2, V) + /(V; F1IX2), F)} - /(X1X2; ^2) (72) 

can be achieved by partial decode and forward. Let Xi — {Xr, Xd) and V — Xr such that 
the input distribution is of the form p{x2)p{xji\x2)p{xD\x2). The achievable secrecy rate is then 
given by 

R = mm{I{XRXn; Y\X2, Xr) + I{Xr, Fil^s), I{XrXdX2, Y)} - I{XrXdX2, Y^) (73) 
= mm{I{XD-, r 1X2, Xr) + I{Xr- YllXs), /(X^Xs; Y)} - /(X^X^Xa; Y^) (74) 
= min{/(Xo; F jXs) + /(X«; ^1X2), /(X^Xs; Y)} - I{XrXdX2, Y^). (75) 

The equality in (75) follows from the fact that X^ — X2 — Xr is a Markov chain. We further 
specialize the bounds for the three cases based on the receiving capability of the eavesdropper. 

A. Case 1 

R = min{/(X^; FIX2) + I{Xr- ^1X2), /(X^X2; Y)} - I{Xr- Y^). (76) 

The maximization of the expression to the right of the equality in (76) over p{xb,xr,X2) — 
p{x2)p{xr\x2)p{xb\x2) is equivalent to maximizing over the more general distribution xr, X2), 
and henceforth, without loss of generality we consider the general probability distribution xr, X2). 
We now prove that I{Xd; Y\X2) + I{Xr; F1IX2) > I{XdXr; FF1IX2) which completes the 
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proof of this part of the theorem. We have 

I{Xn]Y\X2) + I{Xr; Y,\X2) = H{Y\X2) - H{Y\X2Xn) + I{Xr;Y,\X2) 

> HiY\X2Y^) - H{Y\X2Xn) + I{Xr- Y^\X2) 

= H{Y\X2Y^) - H{Y\X2XdXrY^) + I{Xr- mx^) 

= I{Y; XDXR\X2Yr) + I{Xr; Y1IX2) (77) 

= I{Y- XDXR\X2Yr) + I{Xd; Y^\X2Xr) + I{Xr- 

= 7(y; XdXr\X2Y^) + I{XrXd] Y^\X2) 

^I{YY^-XdXr\X2). (78) 

B. Case 2 



R = mm{I{XD; Y\X2) + I{Xr; Y^lX^), I{XdX2; Y)} - I{XdX2; Y2). 

Note that maximization of above term over p{xd, xr, X2) — p{x2)p{xr\x2)p{xd\x2) is equiv- 
alent to maximizing over general p{xd,xr,X2) and henceforth, without loss of generality we 
consider the general probability distribution p{xd, xr, X2). 

We now prove that I{Xd; Y\X2) + I{Xr- F1IX2) > I{XdXr- YYi\X2) which completes the 
proof of this part of the theorem. We have 

I{Xd]Y\X2) + I{Xr-Y^\X2) = H{Y\X2) H{Y\X2Xd) + I{Xr-Y^\X2) 

> H{Y\X2Y^) - H{Y\X2Xd) + I{Xr;Y,\X2) 
^I(YYi;XdXr\X2), (79) 
where the last step follows as was shown earlier in (77). 

C. Case 3 



R = m.m{I{XD] Y\X2) + I{Xr; Y1IX2), I{XdX2; Y)} - I{Xr; Y2\X2Xd) - I{XdX2; Y2) 
= min{/(X^; Y\X2) + I{Xr; Y,\X2), I{XnX2; Y)} - I{Xr; F2IX2) - I{XdX2; Y2). (80) 
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Note that maximization of above term over p{xd, xr, X2) — p{x2)p{x ii\x2)p{x d\x2) is equiv- 
alent to maximizing over general p{xd-, xr, X2). 

We now prove that I{Xd; FIX2) + /(X^; Y1IX2) > I{XdXr; FY1IX2) which completes the 
proof of this part of the theorem. We have 

I{Xn; Y\X2) + I{Xr- nl^s) = H{Y\X2) - H{Y\X2Xd) + I{Xr, Y1IX2) 

> H{Y\X2Y^)-H{Y\X2Xd)+I{Xr;Y^\X2) 

^I{YYr,XDXR\X2), (81) 

where the last step follows as was shown earlier in (77). 
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